patrick/OpenDTU-old
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: add auth check on battery, huawei and powermeter API endpoints (#1155)

Browse Source
This commit is contained in:
Andreas Böhm 2024-08-08 20:58:12 +02:00 committed by GitHub
parent 82b28e3732
commit df11db1244
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
3 changed files with 12 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
src/WebApi_Huawei.cpp
View File

@ -145,12 +145,9 @@ void WebApiHuaweiClass::onPost(AsyncWebServerRequest* request)
WebApi.sendJsonResponse(request, response, __FUNCTION__, __LINE__);
}
void WebApiHuaweiClass::onAdminGet(AsyncWebServerRequest* request)
{
if (!WebApi.checkCredentialsReadonly(request)) {
if (!WebApi.checkCredentials(request)) {
return;
}

4
src/WebApi_battery.cpp
View File

@ -52,6 +52,10 @@ void WebApiBatteryClass::onStatus(AsyncWebServerRequest* request)
void WebApiBatteryClass::onAdminGet(AsyncWebServerRequest* request)
{
if (!WebApi.checkCredentials(request)) {
return;
}
onStatus(request);
}

4
src/WebApi_powermeter.cpp
View File

@ -32,6 +32,10 @@ void WebApiPowerMeterClass::init(AsyncWebServer& server, Scheduler& scheduler)
void WebApiPowerMeterClass::onStatus(AsyncWebServerRequest* request)
{
if (!WebApi.checkCredentialsReadonly(request)) {
return;
}
AsyncJsonResponse* response = new AsyncJsonResponse();
auto& root = response->getRoot();
const CONFIG_T& config = Configuration.get();